Problem with permanent events

Jan 30, 2012 at 7:41 PM
Edited Feb 6, 2012 at 1:06 PM

I have a script that waits for a usb device to be plugged in and then logs the devices id and a script that reads blacklisted processes from a text file and if any of those processes are created it logs the time the process was created and the full execution path.  It works fine until I restart the OS, the binding is still in the WMI-Event helper but for some reason it doesn't seem to be working. Any ideas?